Thibault Delavallée
24f2f03047
An explicit access check when posting a message has been added at odoo/odoo@9920f20e4c when adding notably computation of display_name as sudo. However this is not the role of ``message_post`` to check access for such an implementation details. Access is anyway already granted through the various browse and record access done during the posting process. Moreover even message access (creation or read) is protected notably through its related record ACLs. Portal/Public access on message_post is anyway done through dedicated routes using tokens or hash/pid that call message_post as sudo. We can therefore remove the explicit access check added a bit wildly in the middle of the code. Task-2710804 (Mail: Clean MailThread API) closes odoo/odoo#99654 Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
Odoo
Odoo is a suite of web based open source business apps.
The main Odoo Apps include an Open Source CRM, Website Builder, eCommerce, Warehouse Management, Project Management, Billing & Accounting, Point of Sale, Human Resources, Marketing, Manufacturing, ...
Odoo Apps can be used as stand-alone applications, but they also integrate seamlessly so you get a full-featured Open Source ERP when you install several Apps.
Getting started with Odoo
For a standard installation please follow the Setup instructions from the documentation.
To learn the software, we recommend the Odoo eLearning, or Scale-up, the business game. Developers can start with the developer tutorials